High

DATE	CVE	VULNERABILITY TITLE	RISK
2001-06-27	CVE-2001-0329	Remote Arbitrary Command Execution vulnerability in Bugzilla Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) the Bugzilla_login cookie in post_bug.cgi, or (2) the who parameter in process_bug.cgi. network low complexity mozilla	7.5
2000-05-11	CVE-2000-0421	Remote Arbitrary Command Execution vulnerability in Mozilla Bugzilla 2.8 The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters. network low complexity mozilla	7.5